Network Access Control

Hi!Anyone knows a workaround for changing the tacacs+ port on the routers which are gonna be controlled by tacacs, if the keyword "port" is not allowed on the "tacacs-server host x.x.x.x <port>" for the version running? any ideas beside changing the ...

We use Cisco ACS 3.3 and I was wondering if there is a way to bulk import devices in to the network configuration area instead of manually putting one in at a time?

Hello,Is the MD2 signature algorithm supported on a CSS?Thanks for a response.Kind regards,Kurt

Need help.. I'm trying to cascade a un-managed switch to a parent swith with a dot1x enabled port. IOS Ver of both switches (slave & parent ) are dot1x compliant.Config Settings of my Parent switch:dot1x system-auth-controldot1x guest-vlan supplicant...

Dear All, I am still new to the world of Cisco.I have here in My Network one Core Switch 4506 with 15 Edge Switch 3560.We configure the Core Switch with This Command :- A- ) HO-CSW-01(config)#username design privilege 15 password kabdesignB- )HO-CSW-...

I've had some problems with the ACS v3.3(1) overall in the night and/or weekend when the activity is low. the log thath shows me is the follow: "Failed to connect to any Windows authentication agent"When it happens I restart the CSA agent and it work...

Hi,I just want to confirm that to scramble the TACACS key on show run display, you put 7:(config)#tacacs-server key ?0 Specifies an UNENCRYPTED key will follow7 Specifies HIDDEN key will follow LINE The UNENCRYPTED (cleartext) shared keyService passw...

Hi allI am planning to authenticate ssh logins to Solaris 8/9 systems using PAM and radius (while radius is considered the primary solution, tacacs+ could be used, too). The radius/tacacs+ server is provided by a Cisco ACS. Can anybody out there conf...

Trying to setup max session to limit the number of concurrent connection a user can have to a AAA device. The user Max session is set to 3 but does not seem to have any affect. Accounting logging is using TACACS+ Accounting reports with start and sto...

HiI have been reading the threads on NAC, but only one of them was similar to my issue. Unfortunately, the suggestions in there did not work. Hence this post.SCENARIO: I am setting up a test lab for NAC deployment for one of our clients. I am using t...

Dear All, I have here in my company 25 Cisco Switch 3560 . as i know, i will configure the Switch with the Basic configuration like Hostname & IP-Address - & Gateway. My 2 question is :- 1- if i configure the switch with the Basic Configuration like ...

We have an issue where ACS denies Authentication because the RADIUS Session counter has been exceeded by the user, however the user has no active sessions with ACS.The only way to get the users authenticated is to Purge all Logged in users for that A...

Hi,In the show tacacs output, what is the meaning of the " /<number> " in the "Tacacs+ Server:" line ?.Thanks,Marcelo

I have installed ACS 3.3 on a WIN2k3 server, with the patches for 3.3.1. ACS opens ok on the server, but when I try to create an administrator account, I get "Errors on page" at the bottom left of the administrator screen, and I usually have to resta...

Hi,Would like to authenticate users who are trying to VPN interface being authenticated by ACS.Anyone have any sample of the PIX and ACS??Thanks.